An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| microsoft | windows 10 1607 | 10.0.14393.0 – < 10.0.14393.9612 | |
| microsoft | windows 10 1809 | 10.0.17763.0 – < 10.0.17763.9376 | |
| microsoft | windows 10 21H2 | 10.0.19044.0 – < 10.0.19044.7807 | |
| microsoft | windows 10 22H2 | 10.0.19045.0 – < 10.0.19045.7807 | |
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 – < 10.0.14393.9612 | |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < 10.0.17763.9376 | |
| Microsoft | Windows 10 Version 21H2 | 10.0.19044.0 – < 10.0.19044.7807 | |
| Microsoft | Windows 10 Version 22H2 | 10.0.19045.0 – < 10.0.19045.7807 | |
| microsoft | windows 11 23H2 | 10.0.22631.0 – < 10.0.22631.7652 | |
| microsoft | windows 11 24H2 | 10.0.26100.0 – < 10.0.26100.9711 | |
| microsoft | windows 11 25H2 | 10.0.26200.0 – < 10.0.26200.9711 | |
| microsoft | windows 11 26H1 | 10.0.28000.0 – < 10.0.28000.3231 | |
| Microsoft | Windows 11 version 23H2 | 10.0.22631.0 – < 10.0.22631.7652 | |
| Microsoft | Windows 11 Version 24H2 | 10.0.26100.0 – < 10.0.26100.9711 | |
| Microsoft | Windows 11 Version 25H2 | 10.0.26200.0 – < 10.0.26200.9711 | |
| Microsoft | Windows 11 version 26H1 | 10.0.28000.0 – < 10.0.28000.3231 | |
| Microsoft | Windows 11 Version 26H2 | 10.0.26300.0 – < 10.0.26300.9711 | |
| microsoft | windows 11 version 26h2 for x64-based systems | 10.0.26300.0 – < 10.0.26300.9711 | |
| Microsoft | Windows Server 2012 | 6.2.9200.0 – < 6.2.9200.26434 | |
| Microsoft | Windows Server 2012 R2 | 6.3.9600.0 – < 6.3.9600.23470 | |
| Microsoft | Windows Server 2012 R2 (Server Core installation) | 6.3.9600.0 – < 6.3.9600.23470 | |
| Microsoft | Windows Server 2012 (Server Core installation) | 6.2.9200.0 – < 6.2.9200.26434 | |
| Microsoft | Windows Server 2016 | 10.0.14393.0 – < 10.0.14393.9612 | |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 – < 10.0.14393.9612 | |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < 10.0.17763.9376 | |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < 10.0.17763.9376 | |
| Microsoft | Windows Server 2022 | 10.0.20348.0 – < 10.0.20348.5761 | |
| Microsoft | Windows Server 2025 | 10.0.26100.0 – < 10.0.26100.33650 | |
| Microsoft | Windows Server 2025 (Server Core installation) | 10.0.26100.0 – < 10.0.26100.33650 |
İki ücretsiz araç, tek savunma: Sensör sunucunuzu yoklayanı yakalar; Shield bilinen saldırganı sitenize ulaşmadan durdurur.
Kurduğunuz an günlük API kotanız 30.000 sorguya çıkar — başvuru yok.
